Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33AE0FC700911F19CE206E2CE1D38B0.roa
File: F33AE0FC700911F19CE206E2CE1D38B0.roa (raw, json)
Hash identifier: leGKVc5QpAipLw5P7OpD6681Gl3xZi+ujERwJ5adSaQ=
Subject key identifier: 27:CF:0B:DD:9F:16:50:A1:DE:3C:A8:1F:58:39:BA:0A:78:F0:AD:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C053
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33AE0FC700911F19CE206E2CE1D38B0.roa
Signing time: Wed 24 Jun 2026 20:19:07 +0000
ROA not before: Wed 24 Jun 2026 20:19:01 +0000
ROA not after: Sat 01 Aug 2026 20:19:01 +0000
asID: 11427
IP address blocks: 156.229.180.0/22 maxlen: 24
156.229.184.0/21 maxlen: 24
156.229.232.0/22 maxlen: 24
156.229.240.0/22 maxlen: 24
156.233.4.0/22 maxlen: 24
156.233.16.0/21 maxlen: 24
156.233.152.0/21 maxlen: 24
156.241.8.0/21 maxlen: 24
156.241.32.0/21 maxlen: 24
156.242.112.0/21 maxlen: 24
156.243.40.0/21 maxlen: 24
156.243.88.0/21 maxlen: 24
156.243.120.0/21 maxlen: 24
156.243.176.0/21 maxlen: 24
156.243.208.0/21 maxlen: 24
156.244.136.0/21 maxlen: 24
156.248.96.0/21 maxlen: 24
156.249.72.0/21 maxlen: 24
156.249.88.0/21 maxlen: 24
156.249.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114771 (0x1c053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 20:19:01 2026 GMT
Not After : Aug 1 20:19:01 2026 GMT
Subject: CN=6a3c3bba-e6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:6d:ca:15:07:03:98:d7:48:48:75:a9:db:
91:41:18:ab:2c:59:0f:2c:eb:da:f6:af:a3:d7:78:
65:d2:30:2f:6f:43:e5:66:73:ec:d8:5d:9e:f3:4b:
db:d8:9b:9c:4a:e6:ff:7c:a5:8b:e9:6f:0c:0f:48:
fb:12:32:fa:fc:9d:64:88:c2:7c:6f:10:26:49:d0:
aa:8e:cc:70:72:25:d4:e2:be:26:0f:e7:dc:d3:31:
2c:91:a6:66:b7:dc:94:44:78:12:2c:a5:ad:c8:8b:
01:d5:54:d4:0f:81:67:88:01:05:15:4e:e9:39:61:
e6:7e:30:0c:48:b8:86:ee:52:4c:6b:44:68:c6:43:
99:99:d0:ce:b5:4a:df:e4:22:29:c6:7f:21:0e:79:
94:0c:f2:51:40:b6:2c:6b:7e:00:34:ed:63:8e:07:
f1:75:10:ef:72:ac:71:14:4b:28:11:9b:74:63:ae:
7d:fb:a6:e7:b8:38:7f:27:7c:a8:f8:ed:47:c8:3a:
c4:d5:59:df:d0:ad:71:33:a0:dd:aa:4b:34:8c:87:
7a:9d:de:88:1c:50:90:25:3a:13:e0:f6:0f:36:8f:
77:5b:c9:56:2a:05:6b:98:ca:a2:38:54:0c:97:24:
45:6a:ce:e3:d8:32:e3:36:cd:51:89:ca:c8:70:5f:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:0B:DD:9F:16:50:A1:DE:3C:A8:1F:58:39:BA:0A:78:F0:AD:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33AE0FC700911F19CE206E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.180.0-156.229.191.255
156.229.232.0/22
156.229.240.0/22
156.233.4.0/22
156.233.16.0/21
156.233.152.0/21
156.241.8.0/21
156.241.32.0/21
156.242.112.0/21
156.243.40.0/21
156.243.88.0/21
156.243.120.0/21
156.243.176.0/21
156.243.208.0/21
156.244.136.0/21
156.248.96.0/21
156.249.72.0/21
156.249.88.0/21
156.249.104.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:2a:2e:29:32:6a:3c:12:15:67:ad:3e:6a:fe:bf:1a:1c:72:
c2:98:5c:b5:ef:f0:9a:d0:8f:40:20:8c:8c:b5:a0:09:8d:e1:
b7:56:a2:c5:03:fa:09:4c:e7:37:21:a8:13:d8:ac:39:af:1e:
ea:bb:dd:13:6c:61:ed:34:24:16:93:8b:c7:7f:1a:e5:39:df:
6d:bc:8f:e7:aa:4e:7e:4b:f1:06:7c:67:0f:7b:92:2a:8e:3d:
61:15:70:e2:ef:02:a0:58:09:45:a3:f0:23:fb:80:be:41:fa:
4c:fd:8d:bc:2e:77:36:5d:56:02:5c:8f:79:7e:39:ae:b9:3c:
65:9b:fb:d5:29:1f:ce:2d:fa:9f:87:10:61:bf:ef:9e:25:52:
c6:41:fb:04:5c:0b:a2:e2:fd:e6:d0:1f:c4:95:8e:e5:af:ae:
b8:68:ea:d2:04:8e:e5:0c:ee:81:b3:a9:57:ea:ea:4b:15:4b:
e3:f7:0c:64:c1:96:7d:e5:15:54:4f:69:5b:5c:30:8b:f1:e5:
5a:88:f1:2b:27:73:61:c5:3d:8f:09:8f:4a:a3:12:54:e9:54:
87:be:fb:ed:05:5b:3e:4c:42:ce:1b:51:94:65:fa:08:f8:57:
09:5a:89:19:51:05:d9:ff:3d:e8:49:d9:34:78:34:ed:25:46:
2c:ea:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:39 2026 by rpki-client